ISO/TR 22100-4:2018 機械の安全性— ISO 12100との関係—パート4：関連するITセキュリティ（サイバーセキュリティ）の側面を検討するための機械メーカーへのガイダンス | ページ 6

3.1

antivirus tool

software used to detect malicious code, prevent it from infecting a system, and remove malicious code that has infected the system

3.2

attack

attempt to gain unauthorized access to system services, resources, or information

[SOURCE: CNSSI-4009, modified — “.., or an attempt to compromise system integrity, availability, or confidentiality” has been deleted at the end of the definition.]

3.3

authentication

verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in an information system

[SOURCE: NIST SP 800-53]

3.4

authorization

right or permission that is granted to a system entity to access a system resource

[SOURCE: RFC 4949]

3.5

confidentiality

preserving authorized restrictions on, and preventing unauthorized access (3.18) to information

3.6

encryption

transformation of data into a form that conceals the data’s original meaning to prevent it from being known or used

Note 1 to entry: If the transformation is reversible, the corresponding reversal process is called “decryption,” which is a transformation that restores encrypted data to its original state.

[SOURCE: RFC 4949, modified — The word “cryptographic” has been deleted before “transformation of data” and “(called “plaintext”)” deleted afterwards; “(called “ciphertext”)” has been deleted after “form”. The second sentence has been moved to Note 1 to entry.]

3.7

firewall

software that restricts data communication traffic between two connected networks.

Note 1 to entry: It is also common to name specific hardware in which the software runs a firewall.

3.8

integrator

entity who designs, provides, manufactures or assembles an integrated manufacturing system and is in charge of the safety strategy, including the protective measures, control interfaces and interconnections of the control system

Note 1 to entry: The integrator can be a manufacturer, assembler, engineering company or the user.

[SOURCE: ISO 11161:2007, 3.10]

3.9

integrity

condition of guarding against improper modification or destruction of information

3.10

IT-security

Information Technology security

cyber security

protection of an IT-system from the attack (3.2) or damage to its hardware, software or information, as well as from disruption or misdirection of the services it provides

3.11

IT-security incident

occurrence that actually or potentially jeopardizes the confidentiality (3.5) , integrity (3.9) , or availability of an IT-system

3.12

machine control system

system which responds to input signals from parts of machine elements, operators, external control equipment or any combination of these and generates output signals causing the machine to behave in the intended manner

Note 1 to entry: The machine control system can use any technology or any combination of different technologies (e.g. electrical/electronic, hydraulic, pneumatic, mechanical).

[SOURCE: ISO 13849-1:2015, 3.1.32]

3.13

password

string of characters (letters, numbers, and other symbols) used to authenticate an identity or to verify access authorization (3.4)

3.14

remote access

access by users (or information systems) communicating external to an information system security perimeter

[SOURCE: NIST SP 800-53]

3.15

risk reduction measure

protective measure

action or means to eliminate hazards or reduce risks

[SOURCE: ISO/IEC Guide 51:2014, 3.13]

3.16

smart manufacturing

manufacturing that improves its performance aspects with integrated and intelligent use of processes and resources in cyber, physical and human spheres to create and deliver products and services, which also collaborates with other domains within enterprises’ value chains

Note 1 to entry: Performance aspects include agility, efficiency, safety, security, sustainability or any other performance indicators identified by the enterprise.

Note 2 to entry: In addition to manufacturing, other enterprise domains can include engineering, logistics, marketing, procurement, sales or any other domains identified by the enterprise.

3.17

threat

any IT-security incident (3.11) with the potential to adversely impact machinery operations

3.18

unauthorized access

any logical or physical access which is not intended by the owner of an IT-system

3.19

vulnerability

weakness in the security of an IT-system that can be exploited or triggered by a threat (3.17)